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RELATED APPLICATIONS 

[oi] This application claims the benefit of provisional application serial number 60/419,674 
filed on October 18, 2002 which is incorporated by reference herein in its entirety. 



BACKGROUND OF THE INVENTION 

[02 ] The proliferation of the wireless local area networks (WLANs) has led to the search for 
ways in which its utilization can be increased. By WLAN, we include all instantiations of 
such technologies as 802.1 la, 802.1 lb, 802.1 lg, Bluetoooth and any similar WLAN versions. 
For example, the specification for the IEEE 802.1 1 version of WLAN includes an access 
scheme called the distributed control function, which permits the network to support both data 
and voice applications. Today voice over wireless local area network (VoWLAN) is a reality. 
The voice may be encoded and transmitted using voice over internet protocol (VoIP) format 
and protocols such as G.71 1, G.726, G.729, SIP, MEGACO, H.323, or other similar protocols 
that are being developed. 

[03 ] One of the issues in WLAN is that there is a limited range of operation due to power 
requirements. For example, a typical IEEE 802.1 1 WLAN has a range of at most 300 yards 
from the access point that connects the mobile devices to the wired LAN. Thus, when an IEEE 
802.1 1 -based mobile device roams beyond this range, any call in progress is forcibly 
terminated. 



SUMMARY OF THE INVENTION 

[ 04 ] The present invention concerns a scheme that enables seamless roaming between the 
WLAN and the cellular carrier network. The method enables a user that originates a call in the 
WLAN and happens to go outside the range of the WLAN to automatically switch over to the 
cellular carrier network without losing connection with the other party. This solution assumes 
that the mobile device has the capability to operate in at least two modes that include the 
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WLAN mode and one of the cellular carrier modes, such as the GSM 5 IS-95 CDMA, IS- 136 
TDMA, and iDEN. 

[05] The above and other features of the invention including various novel details of 
construction and combinations of parts, and other advantages, will now be more particularly 
described with reference to the accompanying drawings and pointed out in the claims. It will 
be understood that the particular method and device embodying the invention are shown by 
way of illustration and not as a limitation of the invention. The principles and features of this 
invention may be employed in various and numerous embodiments without departing from the 
scope of the invention. 



BRIEF DESCRIPTION OF THE DRAWINGS 

[06] In the accompanying drawings, reference characters refer to the same parts throughout 
the different views. The drawings are not necessarily to scale; emphasis has instead been 
placed upon illustrating the principles of the invention. Of the drawings: 

[07] Figure 1 is a block diagram showing the architecture of a typical WLAN that supports 
Voice communications; 

[08] Figure 2 is a timing diagram showing the initial mobile device registration process; 

[0 9] Figure 3 is a timing diagram showing the handoff procedure for a mobile device with a 
PSTN-based call in progress; 

[10] Figure 4 is a timing diagram showing the handoff procedure for a mobile device with 
cellular network-based call in progress; and 

[n] Figure 5 is a timing diagram showing the procedure for cellular network-to- WLAN 
handoff. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

[ 12 ] A typical WLAN is comprised of access points (APs) that are connected to the 

enterprise LAN via an access controller (AC) or a wireless LAN switch. The access 
controller/wireless LAN switch AC is the center of intelligence of the WLAN and is 
responsible for admission control, authentication and mobile device roaming coordination. 
One AC/wireless LAN switch can control several APs and multiple ACs/wireless LAN 
switches can be in the same network. Another device called the Cellular Proxy (CP) is a 
gateway that connects the enterprise LAN to the cellular network. If the enterprise PBX is not 
VoIP-capable, the cellular proxy also provides the VoIP interface between the enterprise LAN 
and the PBX. The Cellular Proxy is located in the part of the enterprise building that has a very 
good cellular coverage. 

[13] The Cellular Proxy is not necessarily tightly coupled to any cellular network. To any 
cellular network, it is a bank of radios. It hides the details of the movement of the mobile 
devices within the enterprise premises from the cellular network thereby preventing the 
cellular network from making frequent updates to its database. Also, it can connect to multiple 
cellular networks simultaneously because it contains radios for different types of cellular 
network technologies, such as CDMA, AMPS TDMA, GSM TDMA, iDEN, WCDMA, 
CDMA2000, GPRS, 1XRTT, lxEVDO, and lxEVDV. Thus, the Cellular Proxy can proxy for 
mobile devices in CDMA-based and TDMA-based cellular networks simultaneously. 

[14] Mobile devices, such as laptops that are equipped with wireless network interface cards 
and personal digital assistants access the network via the APs. A typical network is shown in 
Figure 1. In the figure, the access controller and/or wireless LAN switch are not shown; they 
are assumed to be part of the enterprise LAN infrastructure. 

[15] Each dual-mode mobile device MD has two telephone numbers: one number is 
assigned by the enterprise as an extension of the enterprise's PBX, and the other number is 
assigned by the cellular carrier. The default network for each mobile device is the enterprise 
(or hotspot) WLAN, which means that when a mobile device is turned on, it first searches for 
the enterprise's WLAN and registers with the network, if it is found. If the enterprise WLAN is 
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not found the mobile device MD then registers with the cellular carrier network. The rationale 
for this operational requirement is to save the enterprise money by ensuring that mobile device 
users do not accrue air charges when they are within the corporate WLAN. All calls generated 
by the mobile device while it is on the enterprise network are routed via the corporate PBX to 
the public switched telephone network (PSTN). 

[16] Since each mobile device has two telephone numbers, it can be reached in two ways: 
via the PBX when calls come from the PSTN, and via the Cellular Proxy CP when calls come 
from the Cellular Proxy. Regardless of how the calls arrive, they are converted into voice over 
IP (VoIP) packets by the appropriate device and presented to the mobile device via the WLAN. 
These calls are based on the Session Initiation Protocol (SIP), which has the advantage over 
the ITU-T H.323 protocol in that it is a lightweight protocol that leverages the Internet 
protocols. 

[17] Each mobile device MD goes through an initialization process when it is turned on in 
the WLAN. As discussed earlier, the default network is the enterprise WLAN. Therefore, 
when a mobile device is turned on it sends a Registration Request message to the appropriate 
authentication server in the enterprise LAN. After the authority server has authenticated the 
mobile device, it returns a Registration Complete message to the device. The authentication 
server, which has information on each mobile device's cellular service provider's network, 
then sends a Registration Request message to the Cellular Proxy instructing the latter to 
register the mobile device in the device's cellular carrier network. The Cellular Proxy CP first 
sets up a TCP connection to the mobile device MD via the appropriate access controller (or 
wireless LAN switch) and access point before commencing the registration of the device in the 
cellular network. After the Cellular Proxy has successfully registered the mobile device in the 
cellular network, it returns a Registration Complete message to the authentication server. The 
Cellular Proxy then starts listening on the appropriate paging channel for calls destined for the 
mobile device from the cellular carrier network and will deliver such calls to the mobile device 
via the appropriate access controller (or the wireless LAN switch) and access point. The 
message flow for the registration process is illustrated in Figure 2. 
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[18 ] Consider a dual-mode mobile device that originates a call within a WLAN. As the user 
moves closer to the edge of the network the signal quality begins to degrade. The degradation 
will reach a point where the signal strength is almost imperceptible, which causes the call to be 
terminated. 

[19] Here, the mobile device MD has the capability to monitor the signal quality by 
measuring the signal-to-noise ratio (SNR). Assume also that from practical experience 
acquired through measurements it is known that when SNR reaches some threshold value d, 
the voice quality becomes unacceptable. The goal is to prevent the call quality from degrading 
to this critical point. Thus, when the SNR drops to a cutoff value r > d, the system initiates a 
handoff with the objective of completing the handoff procedure before the SNR drops down to 
the threshold value d. Thus the scheme operates in the following manner: 

[20] When a mobile device experiences SNR measurement value of r, it sends a Handoff 
Request message to the Cellular Proxy via the TCP connection that exists between the two 
devices. 

[21] When Cellular Proxy receives the message it takes one of two actions that depend on 
where the other party in the call is located. 

[22] If the other party is located in the PSTN, which means that the call passes through the 
PBX, then it takes the following actions: 1) the Cellular Proxy uses one of its own carrier- 
assigned telephone numbers to call the mobile device's carrier-assigned telephone number; 2) 
since the mobile device is not physically connected to the cellular network, the Cellular Proxy 
will also receive the call on behalf of the device; 3) after receiving the parameters of the call 
from the cellular network, such as the channel or code to use, power level, etc., the Cellular 
Proxy will forward these parameters to the mobile device over the TCP connection that it 
established between the two and commands the mobile device to switch its radio to the cellular 
network using those parameters; 4) the Cellular Proxy will then close the TCP connection, stop 
proxying for that device in the cellular network to avoid cloning problems, and will thereafter 
forward the call to the mobile device over the new connection established via the cellular 
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network; and 5) on receiving the call parameters, the mobile device will immediately switch its 
radio to the cellular network without having to register again since it has already been 
registered and authenticated in the cellular controller by the Cellular Proxy. As it moves from 
base station to base station outside the enterprise network, the mobile device will be subject to 
the handoff mechanism that applies within the cellular network. 

[23] This sequence of activities is illustrated in Figure 3. 

[24] If the other party is located in the cellular carrier network, which means that the call 
passes through the Cellular Proxy without reaching the PBX, it takes the following set of 
actions: 1) since the Cellular Proxy has all the parameters of the call, it returns these 
parameters to the mobile device via the TCP connection between the two and commands the 
mobile device to switch its radio to the cellular network using those parameters; 2) the Cellular 
Proxy will then close the TCP connection and stop proxying for the mobile device to avoid 
creating cloning problems in the cellular network; 3) Upon receiving the information, the 
mobile device will tune its radio to the channel currently used by the Cellular Proxy and 
receive the call directly from the cellular network. 

[25] This sequence of activities is illustrated in Figure 4. 

[2 6] Assume that the mobile device has a call in progress as it is moved from the outside 
world into the enterprise premises. The operational rule is that if there is good cellular 
coverage within the enterprise premises, the call will be allowed to complete in the cellular 
network after which the mobile device will register in the enterprise LAN using the procedure 
described earlier. However, if there is no good coverage within the enterprise premises, the 
device will initiate a handoff with the Cellular Proxy. The procedure is as follows: 

[27] 1) if the SNR reaches the predefined cutoff value, the mobile device sends a short 
message service (SMS) message to the Cellular Proxy. The message contains information on 
the identity of the mobile device, such as its PBX extension and its cellular network telephone 
number as well as the parameters of the current call. The Cellular Proxy maintains a record of 
the cellular network that each enterprise mobile device is associated with. Therefore, with the 
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information it received from the mobile device the Cellular Proxy sends a message to the 
authentication server to expedite the authentication of the mobile device. 

[28] 2) The authentication server will provide emergency registration for the mobile device 
by broadcasting a Registration Invite message that the mobile device will respond to. 

[29] 3) After locating and authenticating the mobile device, the authentication server 
forwards the device's location and network configuration parameters like the IP address to the 
Cellular Proxy. 

[30] 4) After sending the emergency registration request to the authentication server, the 
Cellular Proxy will start monitoring the channel on which the mobile device was 
communicating and accumulating information destined for the device until the device has been 
authenticated and registered in the network 

[31] 5) When the Cellular Proxy receives information on the device's location, it will set up 
a TCP connection to the device and forward all accumulated packets to the device. 

[32] 6) After this, the operation becomes similar to that described earlier. The Cellular 
Proxy listens on the channel and relays information between the mobile device and the cellular 
network until the conversation is over and the connection is terminated. When the current call 
ends, the Cellular Proxy continues to listen on the cellular network's paging channel for calls 
destined for the mobile device, as described earlier. 

[33 ] This sequence of activities is illustrated in Figure 5. 

[34] While this invention has been particularly shown and described with references to 
preferred embodiments thereof, it will be understood by those skilled in the art that various 
changes in form and details may be made therein without departing from the scope of the 
invention encompassed by the appended claims. 



Page 7 of Specification 



